get-hosts fixes

api/api.go

@@ -257,7 +257,7 @@ func (h *caHandler) Route(r Router) {
 	r.MethodFunc("POST", "/ssh/config", h.SSHConfig)
 	r.MethodFunc("POST", "/ssh/config/{type}", h.SSHConfig)
 	r.MethodFunc("POST", "/ssh/check-host", h.SSHCheckHost)
-	r.MethodFunc("POST", "/ssh/get-hosts", h.SSHGetHosts)
+	r.MethodFunc("GET", "/ssh/get-hosts", h.SSHGetHosts)
 
 	// For compatibility with old code:
 	r.MethodFunc("POST", "/re-sign", h.Renew)

ca/client.go

@@ -611,9 +611,8 @@ func (c *Client) SSHCheckHost(principal string) (*api.SSHCheckPrincipalResponse,
 	return &check, nil
 }
 
-// SSHGetHostPrincipals performs the POST /ssh/check-host request to the CA with the
+// SSHGetHosts performs the GET /ssh/get-hosts request to the CA.
-// given principal.
+func (c *Client) SSHGetHosts() (*api.SSHGetHostsResponse, error) {
-func (c *Client) SSHGetHostPrincipals() (*api.SSHGetHostsResponse, error) {
 	u := c.endpoint.ResolveReference(&url.URL{Path: "/ssh/get-hosts"})
 	resp, err := c.client.Get(u.String())
 	if err != nil {

db/db.go

@@ -67,7 +67,7 @@ func New(c *Config) (AuthDB, error) {
 
 	tables := [][]byte{
 		revokedCertsTable, certsTable, usedOTTTable,
-		sshCertsTable, sshHostsTable, sshUsersTable,
+		sshCertsTable, sshHostsTable, sshHostPrincipalsTable, sshUsersTable,
 	}
 	for _, b := range tables {
 		if err := db.CreateTable(b); err != nil {